$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft File: C9q2CGF_PDGDxHD05hmyeV91w4k.mft (raw, json) Hash identifier: j9Ox1avi1opHLR8MN+qvfgCSCGDacULwOiMsIt2LHu4= Subject key identifier: A4:DD:8E:0A:3A:D3:55:EA:95:39:72:A7:7D:3F:6F:C8:DF:9D:EA:E0 Authority key identifier: 0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89 Certificate issuer: /CN=A91326B3/serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft Manifest number: D5 Signing time: Thu 01 May 2025 04:37:10 +0000 Manifest this update: Thu 01 May 2025 04:37:09 +0000 Manifest next update: Thu 08 May 2025 04:37:09 +0000 Files and hashes: 1: C9q2CGF_PDGDxHD05hmyeV91w4k.crl (hash: wUbthoya+8PdXrpxOkyozBFFbpIWo9abhOiYpuDubwM=) 2: E3ABAA7AE69211EEB34D4B6AC4F9AE02.roa (hash: EyKD4I3R8YSy4asXY+8xvf07IP4owJwI772hb1AAhAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 04:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326B3, serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389 Validity Not Before: May 1 04:37:09 2025 GMT Not After : May 8 04:37:09 2025 GMT Subject: CN=6812fa76-8bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:25:f4:50:8c:9b:8f:be:93:c2:e1:6d:2f:fc: f4:fd:6b:9a:69:e5:90:03:29:01:ba:73:7a:50:97: 8f:7f:09:08:fd:87:b4:f0:76:35:7e:98:6c:8e:9a: eb:f3:20:b8:f5:6b:e3:0f:ed:63:55:9a:88:fc:5e: 28:d8:1a:c5:31:96:a8:99:2d:52:6d:30:5d:30:11: ea:f1:33:03:ca:61:2a:81:1f:ba:48:8c:9b:4b:bd: 7a:20:ec:f1:65:db:6a:05:28:fd:37:0f:83:89:64: 3b:5d:f1:a4:33:df:87:da:98:ff:95:7a:ed:ec:e4: 31:7c:2a:17:33:c9:3f:0d:7d:02:a4:7d:6b:38:bf: 4f:68:02:0d:8b:6b:a8:68:57:29:7b:56:89:88:a7: ec:37:58:ea:4d:e4:87:c0:fd:ea:d9:e3:44:cf:a5: 61:6b:98:f4:74:74:23:5d:75:2d:ae:43:07:7e:22: 27:48:41:37:a3:c6:73:3d:77:4c:1f:be:12:ac:e0: d5:f9:0a:4f:44:1b:e2:e0:c4:89:7f:a9:62:85:74: c7:ca:96:09:6f:23:e2:76:53:d7:6b:5b:69:a0:9f: 06:f6:66:8b:8f:a1:bd:8b:02:a2:4a:c6:9b:0a:df: b8:f5:49:6f:84:95:f2:6f:7c:35:a7:64:ac:22:5e: 06:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DD:8E:0A:3A:D3:55:EA:95:39:72:A7:7D:3F:6F:C8:DF:9D:EA:E0 X509v3 Authority Key Identifier: keyid:0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:9d:f1:ad:4f:d3:48:f4:b1:05:85:f6:9f:df:6f:ff:0c:05: 7d:f5:e7:d0:59:8d:6e:60:6e:17:c0:58:01:5e:de:dc:35:e0: 7b:62:12:8f:99:0d:ac:69:bd:46:d3:d1:b4:ee:72:02:78:64: da:f3:55:0c:2f:4d:b4:45:c9:65:1a:57:d4:d1:41:6f:44:ee: dd:ee:3e:8d:e7:6c:d3:9e:2c:b3:bf:a9:f7:11:9e:29:71:e5: fc:20:34:d7:04:05:c5:a1:33:79:df:eb:ad:e2:92:ab:cc:2e: 21:c1:bd:b9:95:59:b8:95:f9:b5:b1:d1:38:c2:cb:fe:f6:ac: 57:36:fc:ff:4f:8d:a7:fc:71:93:78:ef:24:6c:be:67:1f:0d: 0b:bc:a3:86:8f:20:8e:a9:32:af:f9:d5:d9:75:c9:f2:d7:fa: 79:31:96:aa:e5:d8:5b:96:6c:85:7e:15:8d:6e:cd:aa:64:73: 3a:92:6d:c3:29:b7:a8:28:ec:f7:be:a3:da:f0:1c:c8:0a:6c: 33:2f:af:6b:54:6f:28:c4:df:f7:a3:22:cd:ff:e8:9e:11:c0: 31:38:f6:63:02:6d:49:9d:ff:41:ed:aa:c4:96:93:4e:7e:40: 51:7e:4d:f6:a9:c3:22:c8:6e:02:b7:d2:77:7d:dc:ce:65:92: 77:52:34:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI2QjMxMTAvBgNVBAUTKDBCREFCNjA4NjE3RjNDMzE4M0M0NzBGNEU2MTlCMjc5 NUY3NUMzODkwHhcNMjUwNTAxMDQzNzA5WhcNMjUwNTA4MDQzNzA5WjAYMRYwFAYD VQQDEw02ODEyZmE3Ni04YmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9SX0UIybj76TwuFtL/z0/WuaaeWQAykBunN6UJePfwkI/Ye08HY1fphsjprr 8yC49WvjD+1jVZqI/F4o2BrFMZaomS1SbTBdMBHq8TMDymEqgR+6SIybS716IOzx ZdtqBSj9Nw+DiWQ7XfGkM9+H2pj/lXrt7OQxfCoXM8k/DX0CpH1rOL9PaAINi2uo aFcpe1aJiKfsN1jqTeSHwP3q2eNEz6Vha5j0dHQjXXUtrkMHfiInSEE3o8ZzPXdM H74SrODV+QpPRBvi4MSJf6lihXTHypYJbyPidlPXa1tpoJ8G9maLj6G9iwKiSsab Ct+49UlvhJXyb3w1p2SsIl4GMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTdjgo6 01XqlTlyp30/b8jfnergMB8GA1UdIwQYMBaAFAvatghhfzwxg8Rw9OYZsnlfdcOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjZCMy9DNTU0MjNBQUU2 OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9DOXEyQ0dGX1BER0R4SEQwNWhteWVWOTF3 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0M5cTJDR0ZfUERHRHhIRDA1aG15ZVY5MXc0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjZCMy9DNTU0MjNBQUU2OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9DOXEyQ0dGX1BE R0R4SEQwNWhteWVWOTF3NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWnfGtT9NI9LEFhfaf32//DAV99efQWY1uYG4XwFgBXt7cNeB7YhKP mQ2sab1G09G07nICeGTa81UML020RcllGlfU0UFvRO7d7j6N52zTniyzv6n3EZ4p ceX8IDTXBAXFoTN53+ut4pKrzC4hwb25lVm4lfm1sdE4wsv+9qxXNvz/T42n/HGT eO8kbL5nHw0LvKOGjyCOqTKv+dXZdcny1/p5MZaq5dhblmyFfhWNbs2qZHM6km3D KbeoKOz3vqPa8BzICmwzL69rVG8oxN/3oyLN/+ieEcAxOPZjAm1Jnf9B7arElpNO fkBRfk32qcMiyG4Ct9J3fdzOZZJ3UjRl -----END CERTIFICATE-----Generated at Sat May 3 00:06:37 2025 by rpki-client